NetSight
critical9.8

CVE-2016-10858

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

Impact

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.48.0.5 before 11.48.4.8
from 11.50.0.4 before 11.50.3.1
from 11.51.9999.98 before 11.52.0.23
from 11.52.1.0 before 11.52.1.1

Weakness classification

References